Relocated CORS config