Add option to enable a simple CORS implementation for the api server