#131 fix calling of cors-enabled check. this was not always called (in cases where yasgui ran in singleEndpointMode)