Adding middle-ware for Access-Control-Allow-Control header