Adds the ability to restrict CORS to a set of configured domains