Fixes #2905. CORS white list policy
Fixes #2905. CORS white list policy

Allows both "*" and specific Origin white lists to be specified
in the CORS allowed origins. If the request Origin is one of the
explicitly white listed origins, that will be the response header,
otherwise "*" will be used.

Kitware/girder,Kitware/girder,RafaelPalomar/girder,manthey/girder,manthey/girder,jbeezley/girder,Kitware/girder,girder/girder,RafaelPalomar/girder,manthey/girder,jbeezley/girder,jbeezley/girder,jbeezley/girder,girder/girder,RafaelPalomar/girder,girder/girder,girder/girder,RafaelPalomar/girder,Kitware/girder,manthey/girder,RafaelPalomar/girder