Update web.js

Putting Back CORS Changes