Turn on CORS and fix a formatting bug