Add support for CORS

Cross Origin Resource Sharing (CORS)
Remove access to tenon for testing