Add cors headers for cross domain fetching closes #83