Fix to allow CORS requests