Removed header declaration for CORS