by adding Base_downloadWithCors that acts like Base_download but
adds CORS headers according to Base_prepareCorsResponse.