feat(CORS): add CORS methods to ApplicationController