Adding CORS to serve.py
Fixes issue with edX