Added very basic CORS handling