Hello, is there a reason why origins aren't configurable via deployment to be checked in PreAuthActionsHandler in the Java Adapter? The preflightCors() method performs checks against methods and headers, but all origins seems to be accepted. Sascha