Make CORS configuration general for subdomains