feat(CORS): handle CORS requests in app