FP-214: Fixed CORS configuration to allow all headers and the 'PATCH' method.