Enabled CORS for allRoutes