FYI for others: for the
addMapping call, you have to use /** to enable CORS for all endpoints. Using * or ** won't work.
