MARMOTTA-557: Relaxed CORS configuration: allow 'PATCH' and all headers for CORS requests.

Updated CORS library to 2.1.1: L&N checked, no changes required.