Set up CORS hander for error responses

/to @ritch 

See https://github.com/strongloop/loopback/issues/575
It would be nice if we only used this when the request origin does not match the host... Perhaps this happens in the `cors` module.