Added CORS headers

Signed-off-by: PenguinToast <william@PenguinToast>