Add search endpoint to CORS whitelist