Add CORS headers in HTTP responses.

@arunkmp provided a patch in #28 to add CORS headers so that `avecado_server`'s tiles can be used from a JS file hosted on a different server.