Trex support for allow_cors on a per-route basis