82591368 allow cors

Updated application controller to handle CORS requests. This is so that the Navigator team can make requests from their Angular app.
Yes, we actually need it in our before filter. I will remove it here and leave in the initial response.