adding web-security=no to phantomjs config to be able to run CORS tests