Trying better cors middleware