rename cross_control decorator into crossdomain
add support for http options methods, add headers in case of bad request or not found