CORS filter a bit noisy

[Benson Margulies]

It looks to me as if the CORS filter has a bug: it returns headers
even when the request is not cross-origin. Sergey,