add CORS header

this solves some issues with chromecast (see
https://github.com/mafintosh/peerflix/pull/113)
0.7.3