Simple and tiny CORS component