[app][s]: pass through error codes if error on upstream urls (e.g. 404, 500 etc).
[app][s]: some bugfixes re new end stream handling.
[cors][s]: fix up OPTIONS for CORS.