set Access-Control-Allow-Origin header for .woff fonts

Fixes cross domain issues with Firefox and custom fonts.

Firefox seems to opt for .woff fonts by default, and it also adheres to
strict cross domain policies which prevents fonts from being downloaded
from domains without explicitly allowed origins.
set Access-Control-Allow-Origin to "*"

Calling "Header set" multiple times consecutively does not work, as only
the last value is picked up by Apache.

Ideally this should be limited to the originating domain, but since we
don't have a reliable way to determine the origin domain at the moment
and we are dealing with redirection issues with the root domain, allowing
access to font files only from anywhere sounds like a reasonable workaround.

Of the major browsers only Firefox seems to respect this header value correctly.
Merge pull request #5 from nnevala/release/0.1.0

set Access-Control-Allow-Origin header for .woff fonts