Enable setting CORS `Allow-Origin` to enable cookies from UI

[eadgbear]

• With the new cookie-based client sessions, CORS needs to be modified from allow-all to a specified domain/value