Fixing CORS issue, putting @GET in ListResource