Add cors

@kbowerma this adds cors support.  We need it for the www site.