Add configuration support for CORS allow-origin pattern. Fixes #6.