Allow cross-origin requests from localhost:3001, which is client-side application