Set cors to everything by default

[f-necas]

needs to be changed

[jeanmi151]

we can't allow CORS with wildcard, we should have a way to set a whitelist

[edevosc2c]

if the data is public and with no credentials, it is fine to set CORS for all website. CORS does not forbid anyone to request it from outside of a browser.

[landryb]

* is incompatible with http auth, so as soon as you plan to have 'restricted' access you're in for a nightmare.

[fvanderbiest]

* is incompatible with http auth, so as soon as you plan to have 'restricted' access you're in for a nightmare.

This will be revisited in a second time, when MEL will expect secured datasets (Q4 2024)