CDX: Add configurable setting for Access-Control-Allow-Origin