Fix Bug 952518 - CORS enable /api/butterconfig, warn about endpoint being public