properly enabled cors, communication between front and backend is now working via Web API