Updating cross-origin (cors) rules