Add ACAO (Access-Control-Allow-Origin) header for CORS (Cross Origin Resource Sharing)
Merge pull request #23 from Financial-Times/cors

Add ACAO header for CORS