remove duplicated CORS setup code
remove the 'tasks' resource in Tasks::API

This removes the need to have tasks/tasks in all URLs