Added allowed origin 'whitelist' functionality to CorsFeature