Add Identity to CORS origin property

To prevent "origin is not allowed" errors from Identity pages