add http.cors settings to template