Added a cors option to allow cross origin requests

This PR adds the cors headers to allow cross origin requests when running `broccoli serve`.