CORS middleware installed