Add CORS support

1. for all origins on dev environment
2. for GLN (.com,.org,IP) on prod environment
Merge branch 'master' into hotfix/no-root-url-binding
Keep no-root-url-binding updated

Change the mapping of the rewrite filter to bind on /search-api instead of /
(master)