Structure the CORS bit some more.