Toy CORS enabled api for use with js fiddle and its ilk