GPII-217: simplified CORS config for pref server.