Added CORS configuration for JS AJAX requests