Added cors and authorization for every single endpoint