Add URL params, CORS header and proper status line

Since it's not using the latest version of Requests, I don't use
response.reason since there was a bug.
Also, the CORS headers are more than just Access-Control-Allow-Origin…
It should also be configurable through an env variable.
add Procfile for Heroku (duh)
Fix port issue on Heroku
Add environment variable for API root URL