Respond correctly to a CORS request