Be more verbose in what cors accepts...