Accept "time" as non additive dimension property
added after_request decorator and server config option allow_cors
(default True). Adds all known CORS-related headers, perhaps too many
or with excessive values.
convert allow_cors to string option; if included can be * or comma-sep
list of host URLs
Cosmetic change of allow_cors_origin; added docs