CORS support

This approach is minimalist, it essentially provides a request helper that
extracts the CORS info, and an example of possible CORS logic.
This acknowledges that CORS logic can be custom and complicated, and leaves
maximum flexibility to the user.