Add CORS allow-all rules to tokenserver nginx config.