Loosened up CORS settings