Allow cross-origin requests to Sinatra