Added support for CORS (not just GET)