Flesh out federation a bit more

- Add CORS headers
- Make it work with and without native SSL
Any reason you are not using port 443 for SSL?