Remove the CORS header