fix cdn links to work with http or https
add CORS headers to search method
added method to set cors headers in controller
change ajax search method to jsonp to get around cross-origin issue on my.harvard
comment out the jsonp config in case needed later
Merge pull request #7 from Harvard-ATG/bugfix/url-protocols

Fix cdn links to work with http or https
Merge branch 'master' into gsas_branch