Add CORS support for API requests

This change will allow users of ClusterRunner to build dashboards
against the ClusterRunner API while keeping the API secure against
unlimited cross-origin access.