Allow CORS (Cross-Origin Ressource Sharing) for the api server