enabled CORS to see if Swagger UI works