Update on how to enable CORS beyond the cache