Built the CORS settings into the plugin

The plugin requires CORS, at least, to handle interactions with the CAS
Token Server