always send CORS header
Merge pull request #32 from dart-lang/cors

always send CORS header