Added CORS enabled headers to server.js