enable cross-origin resource sharing and disable x-frame-options
Merge pull request #9 from bgruening/cors

enable cross-origin resource sharing and disable x-frame-options