Minimalist example of CORS in raw node.js