Enable CORS for Oauth2 routes