Cors config change back-ported from the live config.