Added insecure_cors_policy check

[Closes #507]