add CORS headers on archive endpoint

https://github.com/juju/charmstore/issues/146
So this needs to be a lot more than archive. Any api endpoint, and the GUI will use search, meta, and expand-id along with the archive endpoints.