Basic support for CORS.

Allow any clients to access all resources with GET and OPTIONS.