Setting proper hostnames for CORS responses