egg-static should support CORS setting

while egg does support CORS via egg-cors, it doesn't allow resource specific CORS enabling. For example, if I want to enable my JS and CSS files to be read on a crossorigin page while disabling crossorigin request, it simply cannot be done.