Added Access-Control-Allow-Origin header

[matthewbdaly]

Have added the Access-Control-Allow-Origin header to response. This makes it easier to work with when mocking REST APIs