Removing restrictive security focused headers; while quite useful they also quite annoying when you want to solely reverse proxy in a UI
Creating a `CORS` middleware to set `req.cors` before anything else can run, fixing `proxy()`, deleting CORS headers when not required, fixes #309