Added CORS
Updating CORS to allow access from S3 staging