Adding CORS to this API