It's not clear to me how this interacts with the description for cors_support: "To use if you especially want to disable CORS support for a particular service / method".  What happens if I specify cors_support=False and cors_origins=("*",)?  Should it disable CORS support or provide it?