set the webserver to bind to /api, not /

Signed-off-by: Daniel Halperin <dhalperi@cs.washington.edu>
SampleJaxRsApplication: add CORS filter

Signed-off-by: Daniel Halperin <dhalperi@cs.washington.edu>