CORS support in action.php