(#2) Adding CORS middleware