Add CORS support.

Include "Accept-Range: none" header in HTTP responses. Until
phantom-api supports range request, it is nice to adviae the HTTP
client that the server doesn't accept range requests.

Also, fixe dynamic class instantiation syntax.