Make Access-Control-Max-Age a configurable value

When using eve with rapidly changing data, the 21600 default of access-control-max-age for cors requests becomes too long, so made the max_age field configurable (decided it was time I didn't just complain about the code, but actually try to fix some things). Added a simple test for the default case, and with a changed value.