Send A-C-A-O header (allow CORS) ALWAYS. Closes #69
Drop conneg closes #71, routing refactor closes #64