Move compat id out of cors headers