Add CORS to application