CORS fun continues