Tune in CORS preflight response