Added CORS enabled headers to controllers/main.js