Handle allowed CORS requests origins