[api] allow cross site requests to api.
Merge branch 'cors'

Conflicts:
	src/Payum/Server/ControllerProvider.php