Removed console.log from CORS middleware