Fixed CORS settings on controllers