add logic to detect if CORS policy is not set on S3 bucket

[simsong]

The web app won't download files from S3 unless the CORES policy is set. See db_object.py