Add CORS support to GET requests

This commit adds permissive CORS headers to GET requests, and handles preflight (OPTIONS) requests too.

If the previous behaviour is preferred, it can be obtained by passing -disable-cross-origin-requests in the command-line.

Closes #66 (closed)