Elasticsearch: Enable CORS headers

According to the docs [0] this should be the default, but for some
reason it isn't.

[0]
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current
/modules-http.html