Enable CORS for image stream

Per @covedesign, this should enable the http header for CORS so that you can manipulate the canvas in javascript.