added CORS gem and config