Remove sinatra-cross_origin

The GOGGLES DO NOTHING
Inject headers manually
Merge pull request #108 from theodi/feature-add-cors

Actually get CORS working properly