Add a restriction to CrossOrigin annotations

[jessitron]

This is a recommended change from your friendly security advisers.

    While allowing cross-origin requests is essential for some local testing, it is 
    otherwise discouraged by ... people. As long as your local front end is at localhost:8080,
    you'll be able to test.

    If there is a particular reason that your service should allow more requests (like, it's a public API)
    then please comment on this PR and then close it or remove individual endpoints' changes.

Created by Atomist Editor RestrictCORS

---
kind: "operation"
client: "com.atomist:rug"
version: "1.0.0-20170609011313"
editor:
  name: "RestrictCORS"
  group: "satellite-of-love"
  artifact: "rest-service-generator"
  version: "1.13.23"