Set up CORS hander for error responses

/to @ritch 

See https://github.com/strongloop/loopback/issues/575
Maybe I am missing something... but this object doesn't look like it is larger than 1kb.