change API - add feature flags, "corsHeaders" option, and CORS feature flags "cors" and "corsCredentials"
corsSpec: fix description
test: add corsCredentialsSpec
-node: add corsCredentials feature flag