Moved CORS configuration to DemoSession factory so that headers are set for each call (supposedly).
Removed use of rating directive since it doesn't match how rating module works.
Added initial voting implementation using ng-click. Still needs work.
Remove CORS support for now.
Hardcode root login for now.