Scaling back on the CORS headers