config change for CORS bundle