Add stream to allowed cors endpoints