Use rack-cors to permit cross-origin requests.
Merge branch 'allow-cors'