Add option to bypass CORS