typo
CORS (issue #37)