Added CORS tests for @mattbasta's commit 6d51aa20