Added `cors.conf` for enabling CORS