Cors - not tested

[devflash101]

should test if this feature works (test fetch in rubik-backend)