#418 removed default.yml allowOrigin: *