Extended cors policy implemented