Added .env.sample, added CORS env var