Cors

Add a first support for CORS (Cross Origin Resource Sharing).
Does it need to be configurable ? Does it make sense to disable CORS on pure web service ?