Stubbing in CORS configuration