CORS Updates

* Added CORS header for all API requests
* Removed duplicate headers
* Removed cookies from API requests