added api controller to get user data

go honor system!  Cause that’s how rev 1 is going to work.
added CORS support so other platform apps can talk to the accounts server