Add CORS support

fixes #74
I do not believe any methods other than `GET` and `POST` are used. Perhaps another contributor can verify.