GPII-217: adding preferences server CORS support