Enable CORS

Please see http://www.w3.org/TR/cors/