CORS Demo

Use /api/cors to test.