Initial release of CORS package

This release is basically a backport of the github.com/rs/cors Go library.

It is tested for development use but not recommended for production without exhaustive testing.