Fix cors headers (add temporary cors headers for dev)