Add CORS support

https://github.com/fs/rails-base-api/issues/51

Before testing with `$.ajax` do:
```js
$.ajaxSetup({
    headers: { 'X-Requested-With' : 'XMLHttpRequest' }
});
```
ALLOWED_CONSUMER_DOMAINS ?