Test CORS requests