Allow all hosts to be CORS-enabled by * as also used in the HTTP spec.

Some software have backends running on specific (maybe even dynamic) domains of customers. So a specific whitelist action of all domains is preferred (as also available in http://www.w3.org/TR/cors). The server in question also needs to be configured like this to allow a browser to make an cross origin request. Thanks for considering.