Removed possibility to do anything else than get CORS