CORS fix, typo fix