Can CORS be customised to meet our needs?