Enable CORS by middleware