changed cors headers allow
added tests for OPTIONS and CORS
add CORS filter bin to ignore
update ignore