Use simpler solution for CORS headers