Enable CORS for all endpoints