Moved CORS 'fix' into a decorator.