Fix fortunes scope and add CORS support