Enable CORS; rename /puzzles => /puzzle