Introducing CORS support.

This is a minimum viable solution in order to get cors support working in cougar.

It is meant for discussion and to help improve getting to a good enough state to be merged.
Same comment as allowedOrigins - default allowed headers should contain only the standard Cougar ones. X-Application is BF specific.