Enabled CORS, disabled SSL