Basic CORS support for http/https requests