Use CORS prefix instead of XS

* Changed CORS settings variable name prefix from XS to CORS
* Removed refs to AttachedPaginationLinks decorator