fixes bug 909516 - allow CORS on calendar feeds