Implement a proper CORS policy, with support for 'withCredentials: true' XHR requests
Clean unused controller
Adds match all routes for pre-flights CORS OPTIONS requests
Fix small bugs in contribution (was not allowing streams_attributes_id, image upload was not working)
Application layout update (will very soon be replaced by angular based front)