Revert "Revert "Serve CORS from app""

This reverts commit 8694cb4b92c00d0edba6c48927daca97caad24e1.