rails-api boilerplate with cors support