Adds CORS support
Limiting CORS to the API