Add 201 status code, and CORS