CORS support

Enables cross origin access to the API. (Fixes #711)
Tests pass, so sinatra base must be smart enough.