Fix cors * handling.