Fixed another mysterious CORS issue (CloudFront + S3)

It feels like I spend most of my time fixing CORS errors