Use CORS for NTP sync