Prevent private projects to be exported as JSON
Enable CORS for tasks json export
Fixes #451
Merge pull request #507 from pgiraud/cors

Cors