Allow CORS requests to specify byte ranges

Handy for random access from a browser. I've got a project that fetches individual images from inside `.cbz` or `.zip` that depends on this.