This is not needed anymore. CORS headers are injected in the response by a middleware class.