Add CORS policy to backend

Required to allow communication between front- and backend.