Add public config
Refactor CORS allowed origins so that they can be called from elsewhere