Added CORS (Cross-site scripting) to WebAPI