Assess CORS - Should Aye Aye handle it?

[Gisleburt]

See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS

[Gisleburt]

AyeAye doesn't prevent CORS you can just create an endpoint to send the correct headers.

/**
 * CORS Access Control information
 */
public function optionsUserEndpoint()
{
    header('Access-Control-Allow-Methods: GET,POST');
    header('Access-Control-Allow-Headers: origin, content-type, accept');
}

It's definitely something that can be imporved, but for the time being I'm closing this off.