Changed to API cors setup