Custom Middleware Test

The request that serves this should have CORS set to allow all requests.