Added CORS to config/application.rb