Add crossOrigin option to ol.source.OSM options

This allows `ol.source.OSM` to support servers that do not support [CORS](http://enable-cors.org/).