adding rack-cors so that backbone can access rails api