Add CORS for every API handler