Currently CORS is defined in the services. Moving that to the gateway could make sense, right? @christiannagel