Simplify cors headers