Implement API non-RESTful format, JSONP, CORS

Fixes #53.
Or does the API not require preflighting? If we accept `Content-Type: application/json` then we would.