Add CORS. headers to responses

[thoma127]

For our work in the fees integration for One Stop we need cross-origin resource sharing.