Add CORS support to subjectcodes/

In other words, enable OPTIONS request handling.