Updated CORS enabled headers to server.js