Add CORS headers for API calls to fix webapp ajax call issues that origi...

...nate from a different domain

@DeepDiver1975 @LukasReschke @ikacikac