Updated controller response CORS option