added: `from` and `to` parameters of records query

 - URI `/record` now accepts `from` and `to` parameters
 - `Service` has been modified for cross domain accesses
changed: default allowed headers

 - "Authorization" and "Content-Type" headers are always allowed
 - Comments are refined