Add `GET /api/states` route

Such a route is easier with CORS handling. Otherwise, we could also
implement the `OPTIONS` handler.
Merge pull request #4 from vincentbernat/feature/get-states

Add `GET /api/states` route