Fix CORS in devhub test receipts (bug 1104371)

This also fixes the CORS decorator which was
previously broken for OPTIONS requests.
add in desktop payments flag (bug 1109191)
add a contribute.json file (bug 1074452)