Allow only Bangazonians access to the API

[hannahhall]

Update, and use, a CORS policy that only allows requests from the http://bangazon.com domain.

Ref: https://rubygems.org/gems/rack-cors