Add CORS support

fixes #74