Allow cross-origin requests from whitelisted domains

[#77484582]

Signed-off-by: Michael Fraenkel <fraenkel@us.ibm.com>