Currently, a special `nop` route is added for each request that needs CORS. Instead, we should use a middleware approach (like https://github.com/barryvdh/laravel-cors/blob/master/src/HandleCors.php).