add CORS headers on archive endpoint

https://github.com/juju/charmstore/issues/146