[nim] Allowed cross-origin requests on the API so that localhost calls originating from the web-client running on a different port do not get blocked for fear of Cross Site Scripting.