Reply with CORS headers, don't peform query on OPTIONS
Merge pull request #3 from drcapulet/alexc-cors

Reply with CORS headers, don't peform query on OPTIONS