Enhanced cors support

Removed EnableCrossDomain flag and updated samples with new owin cors middleware.

TODO: Remove JSONP support pending discussion with @DamianEdwards :smile: 

#2072