change hook to before.dispatch so CORS gets applied on Exceptions
it should be slim.before.dispatch :)