Turn on CORS again

For testing!