Minor fix

Fixed CORS code
Added String::create function with c-string