[keycloak-user] CORS support