Added support for CORS on backend