EZP-21118: moved nelmio_cors config to extension