Support Access-Control-Allow-Origin configuration and use