OK.  I've got `rack-cors` in the Gemfile already; I use it in https://github.com/SquareSquash/web/blob/master/config/environments/development.rb#L54 -- perhaps you can use that?