Add option to enable a simple CORS implementation for the api server

Related to https://github.com/GoogleCloudPlatform/kubernetes/issues/1128
The typical order for comparisons in tests is actual != expected, and the error message should use that order as well. In this case, you pass the arguments to the fmt call in the right order but the text in the fmt string is backwards.