Brian Hatchet authored May 24, 2019 and Mark Harding committed May 24, 2019

Added an api handler for options requests that sets the origin to the requestor
Added logic to send the appropriate headers to allow CORS

Checkout oauth

See merge request !118