CORS support
Added allow origin '*' to all responses