adds Rack::Cors