Corrected server configuration - enabled CORS and moved hash checking