Add wildcard CORS support

While using `committee-stub` I was running into cross-origin resource sharing issues.
My app was served on 9000 while committee was served on 8080. 
This PR adds a wildcard `Access-Control-Allow-Origin` header.