Correct CORS url.