Kennric/whats fresh cors

Added the add_header 'Access-Control-Allow-Origin' '*';  setting which will allow html instances of the What's Fresh mobile front-end to talk to the API via javascript, avoiding CORS issues.