Revert "Serve CORS from app"

This reverts commit 7f66d4bce984c51d99b16c116ae1907ddf60eddc.