Changed all the controllers to use CORS and allow anyonomus access for the time being