Add rack-cors gem and whitelist github api