Proposal for Support CORS (Cross-Origin Resource Sharing) #216

Add a Filter to handle multiple resources and a Helper to add CORS headers manually.
if allowOrigins contains "*", then you should return "Access-Control-Allow-Origins=*" rather than the origin specified in the request, but only if allowCredentials is false.