Add app based configuration and resource-level handling

Decorating individual routes is tedious for large projects. This change adds an after_request handler which allows configuration of CORS on a per resource level, more similar to Rack-CORS.

You can now configure a set of regular expressions and associated options to be applied by creating a dictionary of regexp:cors_options.