Enable CORS, step 1
Add cross-origin resource sharing (CORS) test
CORS step 2: Take Access-Control-Allow-Origin from the config
Enhance option parsing. In particular, empty strings might be valid options