Added test coverage for CORS