Moving the CORS header to its separate module.