Fixes #8. Added https://smapr.at/ to CORS header so that the smilie font can be loaded from the CDN.