In CORSMiddleware, corrected cors_policy option naming problems