Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
Ah, I don't care that much, just seemed like a separate thing from the point of this PR.