Initial CORS support
support for dynamic CORS configuration