Access-Control-Allow-Origin should no be defined in the rdf but provided as configurable

[delapuente]

The API should be agnostic of which is the origin so the allowed origins should not be part of the REST definition file (rdf) but it must reside in a config file or to be passed to restapi.