Add basic CORS headers to allow cross-site access.

Add an HTTP header to all responses that allows use in a cross-origin
AJAX situation.