JsonNotFound now understands CORS

Due to some JsonP craziness we used to return 204 (No Content) on some json endpoints.

Our JsonNotFound now does CORS properly and we no longer have the 204 craziness.

@ironsidevsquincy and @phamann will like this I think.