add CORS headers on archive endpoint

https://github.com/juju/charmstore/issues/146
    c.Assert(headers.Get("Access-Control-Allow-Origin"), gc.Equals, "*")
    c.Assert(headers.Get("Access-Control-Allow-Headers"), gc.Equals, "X-Requested-With")

?