Manage CORS with OPTIONS headers so client doesn't need to run a local proxy

[sandrotaje]

If we manage cors with right options header (ex. "Access-control-allow-origin", "Access-control-allow-methods" etc..) the client doesn't need to run a local proxy.

we can use this or implement something custom