82591368 allow cors

Updated application controller to handle CORS requests. This is so that the Navigator team can make requests from their Angular app.
An OPTIONS request should respond from *any* path? Seems weird to me...