Added a new config option CORS_ORIGIN_ALLOW_ALL