[keycloak-user] How to set up CORS for javascript calling a REST app