User cors npm package, enabled for all requests