Added config option for adding CORS headers