Configure CORS to allow POST requests