CORS config on the backend middleware is an array of values, so something like this is fine: ["*.serifhealth.com", "*.vercel.app"], but curious if SuperTokens init allows for multiple different TLD's.