fixup! Basic implementation of CORS