CORS not supported when API-key is incorrect

[jalas167]

Even if the yagna is started with option --api-allow-origin=... if the api-key is incorrect the response is without CORS headers resulting in 2 errors:

Access to XMLHttpRequest at 'http://127.0.0.1:7465/me' from origin 'http://localhost:8080'
has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

GET http://127.0.0.1:7465/me net::ERR_FAILED 401 (Unauthorized)

The response should include CORS headers so the user would get only 401 error.