Added middleware config to allow all cross-domain requests