Reworking of CORS for mobile