Enable CORS in Squash