Also don’t forget… No trailing slashes in cors “http://web.com/” is wrong…
You need this: “http://web.com”