Fix rails CORS