Add Access-Control-Allow-Origin server header for allowing html5/xhr2 clients to download from other servers