Add basic CORS support. Closes #1