Default value in CorsOptions, add unittest