Ability to set CORS allowed origins