CORS fix code