added --cors option (see nodeapps/http-server#43)