Add CORS support for API requests

This change will allow users of ClusterRunner to build dashboards
against the ClusterRunner API while keeping the API secure against
unlimited cross-origin access.
Merge pull request #8 from box/cors_support

Add CORS support for API requests