Fix handling post via CORS