Added CORS for /public-messages