Enable cors

Enable cors for all domains. This can be refined for whitelisting some domains specified in an environment variable