Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
For reference in the mean time, this is what im referring to:

          limit_except OPTIONS {
            auth_basic            "Restricted";
            auth_basic_user_file  /usr/share/nginx/htpasswd;
          }