Add CORS tests for _show, _list and _update