CORS origin is now parsed from applicaton cfg