Feature/cors resource

Allows you to put the `Access-Control-Allow-Origin: *` on resources as well as the normal handlers.