Now tests a CORS failure