Moves cors settings to server.js