ong/cors: Address a few issues

[komuw]

• https://jub0bs.com/posts/2023-02-08-fearless-cors/

(a) update the middleware to properly check for a pre flight request, according to the fetch standard (b) validate allowed origins (c) do more validations, like for credentials and * allows (d) method case insensitive (e) others