Update for POST request CORS and cross-domain

Signed-off-by: Matthew Potter <mdpotter@gmail.com>