Add CORs, helper scripts