Re-factored default settings and added a CORS_ORIGIN_ALLOW_ALL option.