Force JSON return type in CORS