No you haven't doing it ! I have initialize zfr_cors to an empty array in module.config.php