Introducing configuration variables for CORS