Enable CORS, baby

http://enable-cors.org/server_expressjs.html