Fixed cors requirement