Add option to enable/disable CORS