CORS headers + add getAll route