Set CORS headers 

- Shouldn't this be done on a web server / proxy?
Filter 1-armed studies

- Fix treatments assignment