Simplify the CORS enhancement.

 * Removed the configuration value.
 * If CORS is enabled, CORS headers are now always sent.