Support wildcard CORS origin config