Enabled CORS for all operations on all sites