Upgrade CORS library to support preflight