Allow JS requests from other origins

Add "add_header 'Access-Control-Allow-Origin' '*';" option to the nginx config to allow html/js instances of the what's fresh mobile UI access to the API via javascript. Avoids CORS issues.
@Kennric can you test to see if that works and then make this an attribute we can use to change it later if we need to?