Set up CORS
Remove the root element in UsersController responses
Remove the root element in TracksController responses
Remove the root element in UploadsController responses
Add JSON accept headers to all controller specs, eliminating the need for { format: :json } everywhere