make injector globally available
External, configurable CORS middleware.
Leverage global __injector and __inject