enable CORS

add rack-cors (https://github.com/cyu/rack-cors) to enable cross origin requests