OPTIONS request returns empty, and Access-Control-Allow-Origin: '*' if defined
added a test for wildcard * Access-Control-Allow-Prigin response header when it is configured as such
Fixed wildcard * test for CORS allowed origins
Merge pull request #224 from elishowk/feature/wildcard_origin

Feature/wildcard origin