Fix Q13 and allow POST to / and remove CORS