trying to enable CORS for just getMessages route