Loosened requirements for rack-cors