support Access-Control-Allow-Private-Network headers

[haphy]

chrome(Private Network Access) public network can not access localhost

[miguelgrinberg]

For normal use cases there shouldn't be a need to handle this header. And for unusual cases, you can write your own middleware that wraps the WSGI middleware and handles your special CORS case according to your needs.