Add CORS headers to HTTP responses to allow cross origin requests.

See http://enable-cors.org/ , https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
and http://en.wikipedia.org/wiki/Cross-origin_resource_sharing .