allow CORS on both www.wikidata.org and wikidata.org

- sometimes people are ending up on one or the other and
requests are going between the two.

- we want https://bugzilla.wikimedia.org/45005 solved to eliminate the
no "www." part of the url, but that bug is not completely resolved and
I think this change will help somewhat.

Change-Id: Iaa47141086944dedc66264ecf296d17af7d1481b