Put CorsHook back, add linter exception