Enhancing security in CORS