Fix CORS for warden failure app