add CORS headers to every request
support cors via option

only send cors headers if cors is enabled

added flag to disable cors support if needed

fixup cors support

document cors further

document script cors option