Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
Also, `X-Requested-With` could be added to the list as it is widely used, and `If-Modified-Since` although I'm not sure it's supported by the API.