cors support for known domains