Backend: Allow Cross Origin Resource Sharing

To allow browsers from other domains to utilize the canumb API,
CORS headers must be returned. For now there is no real
sofisticated check as to who is allowed. Everything is permitted.