first pass at CORS handling.
allow options, capital Authorization.
Rudimentary cors feature spec
Merge pull request #49 from begriffs/cors

Cors