Refactor reception

[ufukty]

Technical requirement

• Update the CORS handling with support to differentiate policies for services and endpoints
• Enforcing TLS with HSTS
• Investigate further: credential-containing cross-origin simple POST requests that doesn't trigger preflight request.
  • Consider adding a unit to check endpoint resource access/modify policy for cross origins also outside the preflight request handling unit. (Origin Validation)

Project management

• Consider postponing some changes that are only required after allowing cross-origins to access API by implementing a code to completely block cross origin requests until integration from outside becomes needed.