Added setting to selectively enable CORS based on URL regex