SERVER-9327 Allow cross-site requests

Added cmd line option --xorigin to send "Access-Control-Allow-Origin: *" header to allow AJAX requests from other domains.