CORS redirect handling

Running, 5 complete, 38 remain