Add AllowedDomains to CORS, implementing suggested feature in Issue #129