CORS requests in cloud APIs