set Access-Control-Allow-Origin header for .woff fonts

Fixes cross domain issues with Firefox and custom fonts.

Firefox seems to opt for .woff fonts by default, and it also adheres to
strict cross domain policies which prevents fonts from being downloaded
from domains without explicitly allowed origins.