Add some middleware to handle CORS