integrated CORS to API, allowing Angular frontend to consume it.