Serve forms with CORS.