add cors support to rack so fonts can be loaded

this is mainly necessary for local testing since we mainly use
s3 for serving the lab resources now.
[#68989810]
change the Lato style sheet to support FF

[#68989810]