Ensure new fronts.json endpoint accepts CORS requests

/cc @robertberry