Add CORS configuration in rails

[mattlindsey]

CORS must be configured for security and because using the Apollo client from the front end doesn't work without it.