added script to enable CORS for local testing.

account and name should be left blank to fill. go change your secret key!