Setup CORS to allow the api to be accessed from anywhere.