Add PM71 CORS policy