Fix broken CORS test