adapters.http.cors: implement Access-Control-Max-Age