Begins adding CORS functionality (but leaves it commented out)