Feature/cors support

Add cross-origin request sharing support to sleepy. Note that by default CO requests will be allowed from any domain if no allowed origins are specified.