[IMP] Use CORS in pos (only two routes)
[ADD] POS: added cors argument to all routes