Fix multiple domain CORS