Test that rooms URLs are covered by CORS configuration.