Sometimes you feel like CORS sometimes you dont

[kevinkreiser]

depending on whether or not the envt where this is deployed you may or may not want some headers. we should make some changes to attributes/default.rb to at least hint that these are configurable. also the software must be made aware of them but that can be covered by this issue:

kevinkreiser/prime_server#28