Fix Issues #42 - Add Allow CORS to /api/sync

Closes #42