Fix Issues #42 - Add Allow CORS to /api/sync