throw Not Found Exception if the location is hidden.
Updated req. nelmio/cors-bundle to ~1.3