Updated CORS to accept Content-Type headers