load a CORS configuration onto a bucket