Adding (the beginnings of) CORS support

I made the original commit (1198b5a) but then did a git commit --amend to change the commit message slightly. Not sure why the amended commit shows up as its own distinct commit (6b07a16) even though its diff is identical to the original one.