Add CorsMiddleware adding a Allow-Origin=* header

This is required due to the update of js.socialshareprivacy to 1.5 which
loads JSON translation files.

See docstring in CorsMiddleware for more details.
Merge pull request #759 from nidico/feature-cors-allow-origin-all

Add CorsMiddleware adding an Allow-Origin=* header