support CORS so API requests can use proper MIME type
support CORS so API requests can use proper MIME type

see:
http://enable-cors.org/server_apache.html
http://stackoverflow.com/questions/31908050/cors-error-with-angularjs-post-only-in-firefox
http://stackoverflow.com/questions/5584923/a-cors-post-request-works-from-plain-javascript-but-why-not-with-jquery

ARISGames/server,ARISGames/server,ARISGames/server,ARISGames/server