Add simple CORS support to Response

This is a quick CORS support inspired by [http://www.html5rocks.com/en/tutorials/cors/](http://www.html5rocks.com/en/tutorials/cors/)

to use it : `response.allowCORS("*", "*", "*")`