Adding CORS header concerns