CORS Support

The current AddAccessControlHeaderFilter filter provides support for setting the 'Access-Control-Allow-Origin' header on resource responses, but does not support preflight request.

The goal of this enhancement is to replace the current filter with one that fully supports CORS as defined by W3C.