Introducing CORS support.

This is a minimum viable solution in order to get cors support working in cougar.

It is meant for discussion and to help improve getting to a good enough state to be merged.
Happy to pollute JettyHandler - assuming we only want CORS for requests that go via that. If we want CORS for other handler's requests, then this works for me.