Add sample CORS configuration

As suggested in #1