Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
The recover crash and inject logging handler should be injected once here, at the top of the handler stack so that it protects everything and only gets called once.