Implement API non-RESTful format, JSONP, CORS

Fixes #53.
Correct, the current v1 API doesn't require preflighting. All our routes are simple GETs, and we don't require any custom headers.