FEATURE: CORS settings per-site in a multisite env