Add django-cors-headers and allow all origins in all requests