gemfile: update rack-cors
rack-cors: moved config to rackup file