Added remaining CORS to routes for mobile