Add CORS headers for assets so that fonts load as expected from https://peoplethatmake.com as well as https://www.peoplethatmake.com