Added flag for allowing star origin to defaults.php
Allowing star to be returned by access control allow origin.
Switched default value of new setting to off.
Merge pull request #2 from hobbysoldat/feature/cors

Allowing star as cors header.