Merge pull request #2110 from mozilla/issue1973

add access-control-allow-origin to all static resources (excluding views...

tests pass, fonts look good.  I can see the access-control-allow-origin on requested static resources.

r+