Adds CORS support

Signed-off-by: Christopher Rogers <chrissrogers@gmail.com>