Added CORS header for GET/POST/PUT/DELETE