custom CORS configurations to allow cross domain font access

This sets the Access-Control-Allow-Origin CORS configuration to allow pulling from all domains. You may also want to serve fonts to only specific domain, for that you have to replace ‘*’ with the domain names seperated with comma.