MongoDB REST API: Allow cross-domain request with CORS