We enable CORS in dev