Created by: jpmckinney
Set Access-Control-Allow-Origin. Otherwise, can't use the API in the browser.
Access-Control-Allow-Origin