Updated cors policy