The [README mentions these options](https://github.com/expressjs/cors#configuration-options) but doesn't say what the default values are.