Enable CORS headers for remote access