Putting CORS at top of stack