issue #149 (Simple CORS support for GET requests in policy-driven framework)