add crossOriginPolicy drawer configuration to enable or disable CORS image requests
Merge pull request #364 from sul-dlss/cors-policy

add crossOriginPolicy drawer configuration to enable or disable CORS image requests