[WIP] Adding CORS support in responses

This is the API preparation to get rid of apache mod_proxy definitions in our MAP application. This only makes sense if the corresponding PR (will be created shortly) in ga3 will be merged.