Adding CORS support for all requests

This should close #75, but it's blocked on #77.