Added a cors option to allow cross origin requests

This PR adds the cors headers to allow cross origin requests when running `broccoli serve`. 
I needed this for being able to serve fonts.