Added configuration for CORS header