CORS cleanup and Monitor defaults

Closes #325
Closes #426