Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
Last thought: should this really be a flag? What if you start a new frontend up? You have to reboot apiserver? Maybe TODO dynamic changing of this?