Added CORS support for API