Support for cors in PublicRealmResource