CORS fix for IE