Fix CORS
Merge pull request #2 from rwinch/cors-fixes

Fix CORS