Returns json on delete; fix cors on delete