Double cors headers with recipe: https://iiif.io/api/cookbook/recipe/0057-publishing-v2-and-v3/manifest.json

[glenrobson]

The 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed. Have the server send the header with a valid value.