Add wildcard CORS support