add CORS support to swauth_manager

for some strange reason swauth does not support CORS
so, adding it to swauth_manager