bug 922621, add CORS header for our data exports, r=peterbe