CORS: Explictly allow DELETE method
Set endpoint to the current hostname