Set the nginx CORS header to allow any origin to request a resource

This is needed for the fonts to work in firefox when embedding in a page, for example.