Disabled CORS by default.
Updated CORS module to allow all domains by default.