Enable cors only for localhost