fixed up the CORS support for the API
Merge branch 'master' of github.com:remy/jsbin