first try at adding CORS

I'm quite new to go.  This looks like it might be right.  I don't have a full test setup here.  Is this close or what?  I used some guy's middleware in the express style to add CORS support.