Added CORS middleware