Update timers/settings.py to allow all CORS