Allow usage of a cors_policy dict.

This can be useful if you don't want to specify all the cors-related parameters
each time you define a service