API server working with CORS settings on safari only