Cross Origin allowed for /categories