Because CORS is for nginx