Reactivating the insertion of CORS headers.

With the "new" primitive operation constructors in Black.Response, we can work around the bug in GNAT-4.6, which made us disable CORS headers.