Fixed CORS
Removed the ? in callback