82591368 allow cors

Updated application controller to handle CORS requests. This is so that the Navigator team can make requests from their Angular app.
Sorry, I didn't understand the recommendation. Is this what you're suggesting?

  def cors_set_access_control_headers
    headers['Access-Control-Allow-Origin'] = '*'
    headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, OPTIONS'
    headers['Access-Control-Max-Age'] = "1728000"
  end

  def allow_cors_request
    if request.method == :options
      headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-Prototype-Version'
      render :text => '', :content_type => 'text/plain'
    end
  end