Add configurable origins for CORS headers.