Added configuration to disable serving the playground webpage and configuration to set Access-Control-Allow-Origin header value on responses.

Signed-off-by: JacobPozaic <jacobpozaic@gmail.com>

tests/debug-config.json

@@ -5,6 +5,8 @@
   "captchaExpiryTimeLimit" : 5,
   "throttle" : 10,
   "threadDelay" : 2,
+  "playgroundEnabled" : false,
+  "corsHeader" : "*",
   "captchas" : [ {
     "name" : "DebugCaptcha",
     "allowedLevels" : [ "debug" ],