slaprunner: cors allow origin configurable with monitoring interface