// wp-content/mu-plugins/cors-allow-frontend.php