Add ACAO header for CORS

Add ACAO (Access-Control-Allow-Origin) header for CORS (Cross Origin Resource Sharing).

Closes issue #13.