Added CORS support for /data/ JSON streams