Revert "Revert "[major] HTTP Access Control (CORS)""

This reverts commit a83a5bd62a0bd96fa1396571d26cb2c097caa4ad.

Conflicts:
	transformer.js