There is one thing with that, that I still don't get. UseCors needs to be specifically before some other middleware, but unless I need more coffee I don't see any checks to make sure it's added in the appropriate place in the chain