Update flask-cors to 3.0.9 and enable tests
Change: Escape path before evaluating resource rules. Prior to this, flask-cors incorrectly
evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for
"/api/*" whereas the path actually expands simply to "/foo.txt"