Corrected CORS headers and POST and PUT for User now working