Enable CORS headers, add hard-coded test data

Add the CORS header to HTTP responses ("Access-Control-Allow-Origin:
*"), this should make it possible to use the service in web apps hosted
on another domain.

Add some hard-coded results for GetGameList, conditionally compiled when
HARD_CODED_TEST is defined.