Allow all CORS domains if ALLOWED_CORS_DOMAINS is '*'