Cors

Simple CORS support, no need for pre-flight checks for our API.