Don't use self-rolled CORS middleware