Allow user to configure allowed domain for CORS
Allow user to set list of allowed domains for CORS (rather than just one)