CORS options added