Enable CORS in Luposdate Endpoint

In order to be able to access the endpoint via XHR without using a proxy service, [CORS](http://enable-cors.org/server.html) has to be enabled. 

It might be preferable to make this a configurable option, though.