enable CORS headers
Merge pull request #2 from mikedrawback/master

enable CORS headers