Enabling API to public CORS requests