Add CORS support.

Previously, all local development had to be done in-simulator.
Now, development can be done in an appropriately-sized browser and
tested in-simulator only once styles, etc. are complete.

@seanbrookes - Ready for review.