Implement cors_allow_origin header

[Bo An]

I was wondering how to implement cors origins rules. Changing the string values in config.rs doesn't seem to do the trick. It's still blocking fetch requests from local addresses. A small example would do. Thanks!