CORS support

Neurosynth needs to pull binary images from Neurovault for decoding. I added CORS support via the django-cors-headers package that allows whitelisting of specific sites (and whitelisted the appropriate servers). Eventually I think we should allow all sites to make CORS requests, but for now let's make sure this works.