Stricter Cors control

* Not exposing headers
* Logging body in beers/create function