Add CORS and payment verification