Enable cors on dev server