New: CORS support on the API (for developing against the API)

@Taloth @kayone