add enable_multisite_cors to global setting