Use cors package, kill phantom after a few requests