Fix CORS headers
Perhaps found the reason CORS is not working in Heroku
Add cross-origin gem to make life easier