- Move cors config to rack cors initializer
- Allow to set list of allowed hosts for request