Added CORS header for dev