add rack-cors
configure middleware - rack/cors, wide open