Adding CORS middleware for all requests