Enable CORS for widget resources