Add configurable Access-Control-Max-Age header to CORS policy

CORS policy is great and easy to use to enable CORS requests. It would be even better, if also browser caching of the CORS response would be enabled / configurable. Therefore the standard header 'Access-Control-Max-Age' should be available in CORS policy.

Version
all / latest

Current Result
Only the following headers are set:

Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Origin
Access-Control-Allow-Credentials

Max Age is missing and would help to avoid unnecessary OPTIONS calls before every request.

Expected Result
Add a configurable (maybe default 600) Access-Control-Max-Age Header to CORS Response