bugfix - CORS=false, with true was super slow

I didn't need it in the first place, but had copy-pasted from web