Added CORS to a few APIs (bug 856209)