Really disliking CORS right now