Added CORS header to all responses, and renamed oauth in __init__.py to avoid naming conflicts.
Added /entity/ endpoints. Fixed small issue with oauth in last commit.