swagger: allow cross-origin requests

Add CORS middleware to the swagger app.

Add a configuration option allowing developers to disable CORS.

See also https://github.com/strongloop/strong-studio/issues/390

/to @raymondfeng please review
/cc @seanbrookes 
Setting origin to false will disable CORS. See https://github.com/troygoode/node-cors/#configuration-options