Fix CORS filter with optional CORS domain.