Add CORS Policy to /api and Log.php endpoints

[padams]

Description

Right now certain REST API methods (PUT, DELETE, POST) cannot be be used by javascript code running under a domain differs from the domain of the OWA REST endpoint. For example. foo.com Javascript may POST data to an OWA Rest endpoint that is also running under foo.com. But attempts to POST data from foo.com fail if the endpoint is running under bar.com.

To handle cross domain PUT/DELETE/METHOD we need to add support for CORS to the /api and log.php endpoints.

Background:

https://www.moxio.com/blog/12/how-to-make-a-cross-domain-request-in-javascript-using-cors