fixes bug 924965 - enable CORS on the API
Merge pull request #1571 from peterbe/bug-924965-enable-cors-on-the-api

fixes bug 924965 - enable CORS on the API