Add CORS stuff. Closes #6