Configurable CORS.