Add CORS Headers to ConstraintViolationExceptionMapper

All other exceptions support CORS headers, including ConstraintViolationException in case of an IOError deserializing JSON, but not in the general case. I've added them in.