Add an option to disable SockJS CORS headers

This commit adds a corsEnabled boolean property to AbstractSockJsService
and SockJsServiceRegistration to allow disabling the addition of CORS headers.

Issue: SPR-12283