Change CORS support to be disabled by default
This is to ensure consistent behavior prior to having support
2.0.12 Release