Added CORS thing to the /api/ route