Added support for whitelist CORS