Fixing cors headers