Add CORS headers for wide-open access

Add CORS headers for wide-open access to facilitate testing.

This should be made configurable, and not wide-open by default.

Signed-off-by: Jeff Godin <jgodin@tadl.org>