CORS is not supported on browsers as Allowed Origins is missing from CORSMiddleware 