CORS added to the REST API