Add CORS support

Enable CORS and remove JSONP