Update config.xml

access origin changed to allow all external resources