Added CORS to main hash route