Cross-origin resource sharing

Add feature to persist cors hosts in config, edit in general settings tab and append to API headers if any is set.
maybe instead of adding a flag `$parseToHost` to the function, instead leave the code outside 
(let's avoid function flag params to methods when possible)