Cors with 4 policies working. May need to be revisited after more testing