Add anonymous CORS support to server