allow cross domain AJAX requests for the stats URL

see http://stackoverflow.com/questions/19821753/jquery-xml-error-no-access-control-allow-origin-header-is-present-on-the-req for more info


nick was getting  XMLHttpRequest cannot load /preregistration/stats. No 'Access-Control-Allow-Origin' header is present on the requested resource.