Add delete to CORS