Add CORS headers

Added Access-Control-Allow-Origin "*"
Added Access-Control-Allow-Methods "GET"