add CORS header
Merge pull request #96 from opscode/nls/CORS

add CORS header