Added CORS support to all controllers