could we consolidate `enable_cors` and `cors_allowed_domains`? What if it where just a `cors` config param, and if it's present and truthy then it's treated as `cors_allowed_comains`?
thanks for doing this by the way; I've been meaning to get around to it.