Enable CORS for commons role

Follow-up on I9ad7b25ae55195e413357ba50421f492d97dc0b5

Change-Id: I7b4eec4e28925760ed3e8e448fb4b99bb63f13e3