Adding CORS filter to allow Cross origin resource Sharing
Adding enhancement CORS
Move methods
Fix changelog
Merge branch 'master' into feature/CORS
Allow the user to override the request like in RateLimiter
Fix multiple headers management in Access-Control-Request-Headers
Allow the user to remove field by nulling it's value. Usefull for Access-Control-Max-Age
Remove static functions
Adding CORS documentation
Fix link
Move CORS documentation from REST to Structure
Fix unused var
Add absoluteAuthTimeout to yii\web\User.

This is based on the code from Yii 1.1.14 by Ivo Kund.
update changelog for 4317
Update README.md

fixed outdated example.
OAuth extension adjusted to support any custom request type.
Redundant `yii\authclient\OpenId::sendStreamRequest()` removed.
Merge branch 'master' of git://github.com/yiisoft/yii2 into 4317-absolute-auth-timeout

Conflicts:
	framework/CHANGELOG.md
Merge pull request #4325 from nkovacs/4317-absolute-auth-timeout

absolute auth timeout