Only perform CORS-ignore on create