(#72) - /_config support for CORS & db dir

A start for #72. Makes the defaults for --dir come from /_config; makes CORS configurable via /_config (adding command line options for CORS too might be a nice follow up.)