Allow your Nuxeo app to make CORS