Remove bra's CORS functionality.

This is poorly implemented on bra, and would make more sense delegated to a
proxying server.

This involves the removal of CORS from the server app, its config DSL, and the
example configuration.