Update CORS middleware