Update config.xml

allow all access origin