CORS setting script