CORS should be reevaluated if a view returns a Response.

Pretty much what the test shows: I want to be able to return ``Responses`` with custom status codes, etc. from my views without incurring the opaque wrath of the browser's response-swallowing when CORS headers are missing.