Enable CORS requests

[clochix]

A user is requesting to access the *DAV API from a third party application, hosted on another domain.
To achieve this, we have to add some CORS headers to the application.

/!\ before implementing this, we should carefully evaluate the security risk.