Fixes for CORS with posts