Adding Access-Control-Allow-Origin and optional public_url config. Fixes #2610