Switched the website to use CORS - cross-origin requests

REST API server now accepts requests from any source,
site.js no longer has embedded API handlers