Added CORS support

I admit I don't entirely understand CORS, but would it cause a problem if we only allow GET requests?