CORS

Implementing CORS headers needs to be done in the API itself.

By default, Nadles passes all unauthenticated OPTIONS requests to your API backend.

Make sure to return the correct headers in response to those requests.