Fix CORS to return o instead of ok.