Add CORS headers

Getting this error in dev tools when adding comment:

`Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://ADDRESS.amazonaws.com/ADDRESS. (Reason: CORS header 'Access-Control-Allow-Origin' missing).`