Adedd CORS headers to all requests