Add `Access-Control-Allow-Origin: *` header

This feature was requested by @y_imaya
https://twitter.com/y_imaya/status/304026934248087553
bundle update