refs #484 to configure CORS