ResourceLoader: Serve stylesheets with "Access-Control-Allow-Origin: *"

This allows Javascript to access our styling information (cssRules and
related cross domain protected dom information) even if it is hosted
on a different domain.

Bug: 25886
Change-Id: I8e05c13ae1a1589fd120d5c439b1a7128ce2b659