Added ability to add custom log message to router "bind" method, to make it easier to tell what's being bound.
Added "log" option to controller action and policy functions
Now with sails lift --silly, you can see what is being bound to each route--no more mystery double log messages.
Updated the way the router binding log works
Use "_middlewareFn" key of the bound function if available, so we only have to use the options hash as a last resort
Added _middlewareFn key and/or function names wherever possible in hooks
Added a CORS catchall route handler that denies requests from disallowed domains
Added a CORS preflight route handler that basically says yes to everything
Updated CSRF protection
CSRF check is always made now it protectionEnabled is on, but the token is only set if its from an approved origin (or is not cross-domain)
Updated CSRF tests
skipping a couple of OPTIONS tests that don't work right now
Fixed clearHeaders definition