[cors] Fix CORS headers generators The Access-Control-Allow-* and Access-Control-Expose-Headers are response headers, not request headers. Hence, we need generators for them. Closes #4412575.

     1

"""cubicweb-%(cubename)s application package

     2

     3

%(longdesc)s

     4

"""