Add CORS support

1. for all origins on dev environment
2. for GLN (.com,.org,IP) on prod environment