Add header Access-Control-Allow-Origin: * to all GET responses

This fixes the problem of webview not able to access cnx-archive because
they are cross domain. (Close issue #20)
Merge pull request #31 from karenc/enable-cors-v2

Add header Access-Control-Allow-Origin: * to all GET responses