Don't send multiple CORS headers