HttpEPServer: Add Access-Control-Allow headers on all requests

Change-Id: If064c8561894e53c4d3837b5d1da19e9bd318a7c