set access-control-allow-origin header on fonts
Merge pull request #675 from edx/jarv/cross-domain-fonts

set access-control-allow-origin header on fonts