CORS extension for Rails