Refactor CORS configuration

Make cors configuration based on site.yml, not just accepted IP addresses, but also url patterns etc

``` ruby
- host
  - allowed hosts
    -  host1
    -  host2
    -  ...
  - allowed methods
    - GET
    - POST
    - ...
``
```
