Added Access-Control-Allow-Origin header to XSLT pages

Allows any third-party site to load Icecast XSL pages. This should be
configuration, but I just needed a quick fix. For more info, see
https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS