Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
I would expect this to change very rarely over deployment - and I *think* you could just roll the apiserver deployment to add the new one.