Enable CORS on POST

Yep.