Fixed a bug where cors was not being enabled for naked domains