Super quick and dirty CORS. Come back to this when proper middleware is put together. Closes #10 for now.