DSA-55: enabled CORS in settings