CORS wasn't always being enabled (it's just the purpose of this entire project)