Remove Kibana and ensure CORS headers are passed through correctly.  NB!  Not all ES restrictions are in place yet