Added CORS protection