[IMP] http allow auth=none without db outside of web
[ADD] Cross-Origin Resource Sharing support as http.route() argument
[IMP] better handling of methods for CORS