diff --git a/lib/jellyfish/swagger.rb b/lib/jellyfish/swagger.rb
index <HASH>..<HASH> 100644
--- a/lib/jellyfish/swagger.rb
+++ b/lib/jellyfish/swagger.rb
@@ -5,9 +5,8 @@ module Jellyfish
   class Swagger
     include Jellyfish
     controller_include Jellyfish::NormalizedPath, Module.new{
-      def block_call argument, block
-        headers_merge 'Content-Type' => 'application/json; charset=utf-8',
-                      'Access-Control-Allow-Origin' => '*'
+      def dispatch
+        headers_merge 'Content-Type' => 'application/json; charset=utf-8'
         super
       end
     }
swagger: use dispatch and do not add cors headers by default

remove Access-Control-Allow-Origin by default