Using cors module instead of manually inserting http headers