ADD: Activity Feed Highlighting

Also, this adds the Access-Control-Allow-Credentials header, which is
required when querying the steam API cross-domain for things that return
results for the logged on user