switch to django-cors-header for handling cors

[michaelwood]

Setting up CORS for multiple domains is better handled at the middleware layer (i.e. django) than in Apache where it is much more difficult to do things like domain name matching on multiple domains.