PUT for CORS fixed