Usage: /cors?url=https://api.example.com&origin=https://example.com