Add header Access-Control-Allow-Origin: * to all GET responses

This fixes the problem of webview not able to access cnx-archive because
they are cross domain. (Close issue #20)

Version 2 of #28