add rack-cors gem and configure it