Fixed CORS bug