enable CORS

required for https://github.com/OpenRA/OpenRAWeb/pull/9
Merge pull request #2 from Mailaender/patch-1

enable CORS