Add CORSfix to Referral controller