CORS fix attempt 1.