Disable CORS by default.
Merge pull request #377 from avandecreme/cors

Disable CORS by default.