CORS now employs ngx_headers_more module