Add CORS testing