Cc https and cors

Support for --https through a dummy autosigned SSL certificate (that expires in 2038 due to the unix 32bit millenium bug)
Support for --cors that adds some headers so one can testing ajax from a different domain/host/port (though its only for non njs files)