enable CORS on convert routes

This should allow [CORS-style requests](http://enable-cors.org) work on your server. This way you can really use it as a client-side web service.