added CORS headers to /games routes