CORS and n+1 joins