Fix CORS, thanks @cookednoodles